Red Hat Satellite vulnerabilities

2 vulnerabilities

Known vulnerabilities in Red Hat Satellite, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.8CVE-2017-7513red hatred hat satellite+1
EPSS score
0.48%
It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate.5.4CVE-2017-7514red hatred hat satellite+195
EPSS score
0.64%
A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users.